VULNERABILITY INTELLIGENCE
CVE-2026-97509
CVSS score8.8 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-09-24
Last modified2026-10-03
Description
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.